Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/ZhtSpPch7LK6P17B4urb6cmp1qU.roa
File: ZhtSpPch7LK6P17B4urb6cmp1qU.roa (raw, json)
Hash identifier: H9+YxrKIh8Mv9t7/PSf8nWNVEGc5PjDuGGH8f6pV6uI=
Subject key identifier: 66:1B:52:A4:F7:21:EC:B2:BA:3F:5E:C1:E2:EA:DB:E9:C9:A9:D6:A5
Certificate issuer: /CN=b811f8ce6dd0cc480f097540563920aea3d66396
Certificate serial: 01882086754162178371ECCE3ABAD893ADD9
Authority key identifier: B8:11:F8:CE:6D:D0:CC:48:0F:09:75:40:56:39:20:AE:A3:D6:63:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBH4zm3QzEgPCXVAVjkgrqPWY5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/ZhtSpPch7LK6P17B4urb6cmp1qU.roa
Signing time: Mon 15 May 2023 17:47:42 +0000
ROA not before: Mon 15 May 2023 17:47:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 91.205.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:75:41:62:17:83:71:ec:ce:3a:ba:d8:93:ad:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b811f8ce6dd0cc480f097540563920aea3d66396
Validity
Not Before: May 15 17:47:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=661b52a4f721ecb2ba3f5ec1e2eadbe9c9a9d6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:be:4f:a2:b3:13:28:36:40:70:ed:b3:f9:
c4:78:42:91:41:31:80:09:4e:27:14:ec:a7:a0:3e:
96:95:90:d5:ba:5b:0b:e6:a3:c2:48:d5:f5:40:99:
6d:82:18:06:66:23:c5:b2:6f:71:88:f0:5f:a1:cd:
12:53:2d:00:7d:d3:35:ad:95:0a:60:f2:d4:89:8b:
15:ec:e5:ae:00:de:74:28:03:a1:ec:e9:80:85:89:
fb:5b:d8:65:53:98:74:d8:31:01:99:2f:75:09:51:
4b:3f:69:ec:69:ff:bf:e9:b7:b3:cd:85:96:b4:17:
b0:91:12:b3:53:90:df:7b:9d:26:28:64:d2:df:3f:
32:60:9a:fc:62:ce:20:ae:21:d1:70:a9:2b:23:69:
6e:01:be:ab:4c:66:15:23:36:db:64:6a:7d:1d:04:
ad:27:3a:9a:59:a1:40:6f:81:59:59:97:dd:8c:bd:
58:ab:b0:45:2e:73:32:34:6f:89:0f:be:f7:13:51:
5f:fb:eb:fd:e4:c2:51:5b:c2:8b:ac:88:9a:65:89:
a4:2f:bf:80:2a:ef:dc:b2:62:33:52:13:05:d8:02:
31:5e:91:e3:99:61:02:3f:4e:8f:6e:55:50:23:d4:
13:f8:3c:ee:d4:ad:68:db:c5:6b:ab:fa:dd:1c:f8:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1B:52:A4:F7:21:EC:B2:BA:3F:5E:C1:E2:EA:DB:E9:C9:A9:D6:A5
X509v3 Authority Key Identifier:
keyid:B8:11:F8:CE:6D:D0:CC:48:0F:09:75:40:56:39:20:AE:A3:D6:63:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBH4zm3QzEgPCXVAVjkgrqPWY5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/ZhtSpPch7LK6P17B4urb6cmp1qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a37da2-7575-4cb8-84a5-f9cc27832f5a/1/uBH4zm3QzEgPCXVAVjkgrqPWY5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8d:69:9a:e5:c9:77:ab:bb:65:8c:52:2e:04:e4:3c:4a:b3:
77:b0:b4:b9:9d:dd:e1:50:8d:bb:b5:d7:c7:c5:c9:6a:fc:b4:
25:29:09:b1:70:77:99:45:ef:73:e7:c2:47:d9:d9:46:f5:b7:
dd:db:d0:2b:14:1b:19:35:c0:69:ad:03:d5:6c:33:83:b9:27:
28:c8:da:f0:37:24:21:4e:6c:ea:23:90:50:7a:0c:15:87:6c:
36:d3:13:f2:c2:35:90:45:0a:24:b3:00:18:13:09:04:8a:1d:
e5:6e:77:f1:7a:34:cb:2d:3e:72:e1:f4:a7:69:ae:f1:a4:73:
a8:ed:13:8f:f6:43:fb:34:6c:2b:74:3a:ab:b1:34:5c:6a:bc:
e2:49:5f:85:b5:64:50:db:19:e7:9d:54:42:fc:01:89:b3:9a:
38:1e:c4:e8:37:e9:12:0f:10:9b:05:e4:94:3c:36:54:f1:19:
63:71:b2:9b:92:ee:ea:e0:0b:68:76:c8:61:5d:b9:fe:2c:52:
c5:6f:e3:a4:3b:e5:0a:9d:8b:f2:14:8a:60:4a:88:f3:f7:0a:
f2:df:03:8d:11:ea:aa:a3:16:6b:5a:b0:96:3e:33:63:28:9b:
8f:8e:90:30:a5:15:18:2d:1a:bf:f2:53:d6:16:fe:5f:10:71:
f2:af:f2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:42 2024 by rpki-client on console-fra.rpki-client.org